开放接口增加详细调试日志，并支持控制台与文件双写

- OPEN_API_DEBUG 记录鉴权、查单、推送业务字段与 req_id
- LOG_FILE 默认 logs/app.log，标准日志/Gin/GORM 同时输出控制台与文件

backend/cmd/server/main.go

@@ -8,18 +8,29 @@ import (
 	"affiliate_dash/internal/config"
 	"affiliate_dash/internal/handler"
 	"affiliate_dash/internal/model"
+	"affiliate_dash/internal/pkg/applog"
 	"affiliate_dash/internal/pkg/jwt"
+	"affiliate_dash/internal/pkg/openlog"
 	"affiliate_dash/internal/router"
 	"affiliate_dash/internal/service"
 
 	"github.com/gin-gonic/gin"
 	"gorm.io/driver/sqlite"
 	"gorm.io/gorm"
-	"gorm.io/gorm/logger"
 )
 
 func main() {
 	cfg := config.Load()
+
+	// 日志：控制台 + 文件
+	logFile, err := applog.Setup(cfg.LogFile)
+	if err != nil {
+		log.Fatalf("setup log: %v", err)
+	}
+	if logFile != nil {
+		defer logFile.Close()
+	}
+
 	gin.SetMode(cfg.Mode)
 
 	if err := os.MkdirAll(filepath.Dir(cfg.DBPath), 0o755); err != nil {
@@ -27,7 +38,7 @@ func main() {
 	}
 
 	db, err := gorm.Open(sqlite.Open(cfg.DBPath), &gorm.Config{
-		Logger: logger.Default.LogMode(logger.Info),
+		Logger: applog.NewGormLogger(cfg.Mode),
 	})
 	if err != nil {
 		log.Fatalf("open db: %v", err)
@@ -50,6 +61,8 @@ func main() {
 		log.Printf("seed skins: %v", err)
 	}
 
+	openlog.Init(cfg.OpenAPIDebug)
+
 	h := &router.Handlers{
 		Auth:          handler.NewAuthHandler(authSvc),
 		Skin:          handler.NewSkinHandler(skinSvc),
@@ -60,6 +73,7 @@ func main() {
 		OpenAPIKey:    cfg.OpenAPIKey,
 		OpenAPISecret: cfg.OpenAPISecret,
 		OpenSignSkew:  cfg.OpenSignSkew,
+		OpenAPIDebug:  cfg.OpenAPIDebug,
 	}
 
 	r := router.Setup(h)
@@ -67,6 +81,12 @@ func main() {
 	log.Printf("游戏皮肤分销系统 API 启动: http://localhost%s", addr)
 	log.Printf("默认管理员: admin / admin123")
 	log.Printf("开放接口鉴权: X-Api-Key + X-Timestamp + X-Nonce + X-Sign (HMAC-SHA256)")
+	if cfg.OpenAPIDebug {
+		log.Printf("开放接口调试日志: 开启 (OPEN_API_DEBUG=0 可关闭)")
+	}
+	if cfg.LogFile != "" {
+		log.Printf("日志文件: %s （同时输出控制台）", cfg.LogFile)
+	}
 	if err := r.Run(addr); err != nil {
 		log.Fatalf("server: %v", err)
 	}